ganibal1100

Все правила файрвола отключены. # sep/26/2014 10:23:11 by RouterOS 6.1 # software id = R4TC-RN1S # /interface bonding add disabled=yes link-monitoring=none name=bonding1 slaves=ether1,ether4 add link-monitoring=none mode=802.3ad name=bonding2 slaves=ether2,ether3,ether4,ether5,ether6,ether7 /ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=2m mac-cookie-timeout=3d /ip pool add name=pool1 ranges=192.168.88.2-192.168.88.254 add name=pool2 ranges=192.168.89.2-192.168.89.254 add name=pool3 ranges=192.168.90.2-192.168.90.254 add name=pool4 ranges=192.168.91.2-192.168.91.254 add name=pool5 ranges=192.168.92.2-192.168.92.254 add name=pool6 ranges=192.168.93.2-192.168.93.254 add name=pool7 ranges=192.168.94.2-192.168.94.254 add name=pool8 ranges=192.168.95.2-192.168.95.254 /ip dhcp-server add address-pool=pool1 disabled=no interface=ether1 lease-time=1d name=server1 add address-pool=pool2 disabled=no interface=ether2 lease-time=1d name=server2 add address-pool=pool3 disabled=no interface=ether3 lease-time=1d name=server3 add address-pool=pool4 disabled=no interface=ether4 lease-time=1d name=server4 add address-pool=pool5 disabled=no interface=ether5 lease-time=1d name=server5 add address-pool=pool6 disabled=no interface=ether6 lease-time=1d name=server6 add address-pool=pool7 disabled=no interface=ether7 lease-time=1d name=server7 add address-pool=pool8 interface=ether8 lease-time=1d name=server8 add address-pool=pool1 disabled=no interface=bonding1 lease-time=1d name=server9 add address-pool=pool2 disabled=no interface=bonding2 lease-time=1d name=server10 /ip address add address=192.168.88.1/24 comment="default configuration" interface=ether1 network=192.168.88.0 add address=192.168.1.24/24 interface=ether8 network=192.168.1.0 add address=192.168.89.1/24 interface=ether2 network=192.168.89.0 add address=192.168.90.1/24 interface=ether3 network=192.168.90.0 add address=192.168.91.1/24 interface=ether4 network=192.168.91.0 add address=192.168.92.1/24 interface=ether5 network=192.168.92.0 add address=192.168.93.1/24 interface=ether6 network=192.168.93.0 add address=192.168.94.1/24 interface=ether7 network=192.168.94.0 add address=192.168.89.1/24 interface=bonding2 network=192.168.89.0 /ip dhcp-server lease add address=192.168.88.2 mac-address=00:1F:29:09:04:74 server=server1 add address=192.168.92.2 mac-address=00:1F:29:09:14:5C server=server5 add address=192.168.94.2 mac-address=00:1F:29:68:49:5E server=server7 add address=192.168.91.2 mac-address=00:1F:29:62:7B:36 server=server4 add address=192.168.90.2 mac-address=00:1F:29:68:C9:4C server=server3 add address=192.168.89.2 mac-address=00:1F:29:09:44:22 server=server2 add address=192.168.93.2 mac-address=00:1F:29:09:34:9C server=server6 /ip dhcp-server network add address=192.168.88.0/24 dns-server=8.8.8.8 gateway=192.168.88.1 netmask=24 add address=192.168.89.0/24 dns-server=8.8.8.8 gateway=192.168.89.1 netmask=24 add address=192.168.90.0/24 dns-server=8.8.8.8 gateway=192.168.90.1 netmask=24 add address=192.168.91.0/24 dns-server=8.8.8.8 gateway=192.168.91.1 netmask=24 add address=192.168.92.0/24 dns-server=8.8.8.8 gateway=192.168.92.1 netmask=24 add address=192.168.93.0/24 dns-server=8.8.8.8 gateway=192.168.93.1 netmask=24 add address=192.168.94.0/24 dns-server=8.8.8.8 gateway=192.168.94.1 netmask=24 add address=192.168.95.0/24 dns-server=8.8.8.8 gateway=192.168.95.1 netmask=24 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.88.1 name=router /ip firewall filter add action=drop chain=forward disabled=yes in-interface=bonding2 protocol=udp /ip firewall mangle add action=mark-routing chain=prerouting disabled=yes new-routing-mark=ddos protocol=udp /ip firewall nat add action=masquerade chain=srcnat disabled=yes out-interface=ether8 src-address=192.168.0.0/16 /ip route add distance=1 gateway=192.168.1.1 add disabled=yes distance=1 dst-address=192.168.88.2/32 type=blackhole add disabled=yes distance=1 dst-address=192.168.88.4/32 type=blackhole add disabled=yes distance=1 dst-address=192.168.88.4/32 type=blackhole /ip route rule add action=drop disabled=yes routing-mark=ddos add action=drop disabled=yes dst-address=192.168.88.4/32 interface=bonding2 src-address=192.168.89.0/25 add action=drop dst-address=192.168.88.1/32 interface=bonding2 src-address=192.168.89.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.90.0/25 add action=drop dst-address=192.168.88.5/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.6/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.7/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.8/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.9/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.10/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.11/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.12/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.13/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.14/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.15/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.16/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.17/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.18/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.19/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.20/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.21/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.22/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.23/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.24/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.25/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.26/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.27/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.28/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.29/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.30/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.31/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.32/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.33/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.34/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.35/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.36/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.37/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.38/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.39/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.40/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.41/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.42/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.43/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.44/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.45/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.46/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.47/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.48/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.49/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.50/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.51/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.52/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.53/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.54/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.55/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.56/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.57/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.58/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.59/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.60/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.61/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.62/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.63/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.64/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.65/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.66/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.67/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.68/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.69/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.70/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.71/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.72/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.73/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.74/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.75/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.76/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.77/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.78/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.79/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.80/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.81/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.82/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.83/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.84/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.85/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.86/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.87/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.88/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.89/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.90/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.91/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.92/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.93/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.94/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.95/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.96/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.97/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.98/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.99/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.91.0/25 add action=drop dst-address=192.168.88.5/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.6/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.7/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.8/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.9/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.10/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.11/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.12/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.13/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.14/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.15/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.16/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.17/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.18/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.19/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.20/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.21/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.22/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.23/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.24/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.25/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.26/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.27/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.28/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.29/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.30/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.31/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.32/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.33/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.34/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.35/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.36/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.37/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.38/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.39/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.40/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.41/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.42/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.43/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.44/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.45/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.46/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.47/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.48/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.49/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.50/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.51/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.52/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.53/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.54/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.55/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.56/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.57/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.58/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.59/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.60/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.61/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.62/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.63/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.64/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.65/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.66/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.67/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.68/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.69/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.70/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.71/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.72/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.73/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.74/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.75/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.76/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.77/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.78/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.79/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.80/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.81/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.82/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.83/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.84/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.85/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.86/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.87/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.88/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.89/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.90/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.91/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.92/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.93/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.94/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.95/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.96/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.97/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.98/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.99/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.92.0/25 add action=drop dst-address=192.168.88.5/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.6/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.7/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.8/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.9/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.10/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.11/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.12/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.13/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.14/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.15/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.16/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.17/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.18/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.19/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.20/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.21/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.22/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.23/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.24/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.25/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.26/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.27/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.28/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.29/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.30/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.31/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.32/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.33/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.34/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.35/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.36/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.37/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.38/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.39/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.40/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.41/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.42/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.43/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.44/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.45/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.46/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.47/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.48/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.49/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.50/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.51/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.52/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.53/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.54/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.55/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.56/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.57/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.58/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.59/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.60/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.61/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.62/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.63/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.64/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.65/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.66/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.67/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.68/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.69/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.70/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.71/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.72/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.73/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.74/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.75/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.76/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.77/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.78/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.79/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.80/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.81/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.82/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.83/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.84/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.85/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.86/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.87/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.88/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.89/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.90/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.91/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.92/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.93/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.94/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.95/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.96/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.97/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.98/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.99/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.93.0/25 add action=drop dst-address=192.168.88.5/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.6/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.7/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.8/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.9/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.10/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.11/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.12/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.13/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.14/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.15/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.16/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.17/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.18/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.19/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.20/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.21/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.22/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.23/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.24/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.25/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.26/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.27/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.28/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.29/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.30/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.31/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.32/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.33/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.34/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.35/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.36/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.37/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.38/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.39/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.40/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.41/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.42/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.43/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.44/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.45/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.46/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.47/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.48/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.49/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.50/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.51/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.52/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.53/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.54/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.55/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.56/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.57/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.58/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.59/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.60/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.61/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.62/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.63/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.64/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.65/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.66/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.67/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.68/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.69/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.70/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.71/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.72/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.73/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.74/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.75/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.76/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.77/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.78/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.79/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.80/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.81/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.82/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.83/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.84/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.85/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.86/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.87/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.88/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.89/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.90/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.91/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.92/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.93/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.94/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.95/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.96/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.97/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.98/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.99/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.94.0/25 add action=drop dst-address=192.168.88.5/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.6/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.7/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.8/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.9/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.10/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.11/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.12/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.13/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.14/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.15/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.16/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.17/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.18/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.19/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.20/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.21/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.22/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.23/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.24/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.25/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.26/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.27/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.28/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.29/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.30/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.31/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.32/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.33/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.34/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.35/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.36/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.37/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.38/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.39/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.40/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.41/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.42/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.43/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.44/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.45/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.46/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.47/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.48/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.49/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.50/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.51/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.52/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.53/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.54/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.55/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.56/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.57/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.58/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.59/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.60/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.61/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.62/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.63/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.64/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.65/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.66/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.67/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.68/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.69/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.70/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.71/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.72/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.73/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.74/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.75/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.76/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.77/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.78/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.79/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.80/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.81/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.82/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.83/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.84/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.85/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.86/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.87/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.88/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.89/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.90/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.91/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.92/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.93/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.94/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.95/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.96/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.97/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.98/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.99/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.100/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.101/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.102/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.103/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.104/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop dst-address=192.168.88.105/32 interface=bonding2 src-address=192.168.95.0/25 add action=drop disabled=yes dst-address=192.168.88.4/32 interface=bonding2 src-address=192.168.89.0/25 /lcd set time-interval=hour /system clock set time-zone-name=Asia/Novosibirsk /system leds set 0 type=interface-speed set 2 type=interface-speed /system ntp client set enabled=yes mode=unicast primary-ntp=212.73.125.217 /system routerboard settings set cpu-frequency=1200MHz memory-frequency=1066DDR /tool graphing interface add /tool graphing resource add На больших ппс iptables прям очень разочаровывает. Еще на начальных стадиях тестирования на одном интерфейсе делал исходящий маскарад (в конфиге есть отключенное правило). Так вот уже при небольших нагрузках (1 мппс) загрузка ядра в 100% со всеми вытекающими. Поэтому для policy-based маршрутизации пришлось отказаться от маркировки пакетов (аналогичная история была). Если у вас такого количества pps не ожидается, то, возможно, подойдет.

Новая тема. Микротик воткнут 6-ю портами в умный коммутатор и между ними настроет LACP, который работает вполне себе нормально. Теперь у нас 7 атакующих серверов подключены к коммутатору и жертва, подключенная к микротику. Условия задачи: клиента ддосят. Необходимо на микротике настроить дроп пакетов. Условия могут быть самые тупые. Я попробовал по udp дропать пакеты в цепочке FORWARD таблицы filter. Где-то на 1мппс и 500мбит/с на железке загрузка 100%. Может как-то иначе нужно дропать пакеты? route жертвы в null делать нельзя, нужно отфильтровать по сорцу. Есть идеи? UPD1: Через LARTC по адресу источника удалось сделать дроп 1.8мппс при загрузке процессора в 31% UDP2: На последнем тесте 10 злодеев генерируют 4.9мппс. Железка это все дропает с загрузкой процессора в пределах 42-44%%. Если вместо iproute2 использовать обычный route жертвы в null загрузка остается прежней. Что интересно, если убрать blackhole маршруты и дать атаковать жертву, то загрузка CPU увеличивается до 64%. При этом бывают моменты, когда вентиляторы как будто бы притухают, системный монитор показывает 100% загрузку, через мгновения вентиляторы разгоняются и загрузка стабилизируется. Что это за эффект я так и не понял. Было подозрение на генерируемые графики, но когда снова случилось графики были сгенерированы 3 минуты назад (они генерятся каждые 5 минут). Вот эта последняя особенность меня очень настораживает.

Наткнулся на http://xakep.ru/61406/ Наверное, мы в это и упираемся.

До этого делал бондинг. С бондингом проблем не возникло. Трафик перераспределился по 2м физическим интерфейсам и суммарно по ппс и трафику мы вышли за эти границы. Получилось так: Мгновенная статистика по интерфейсам: Interface Tx Rx Tx pps Rx pps bonding1 927.2 Mbps 0 bps 2 519 454 0 ether1 458.8 Mbps 0 bps 1 246 720 0 ether4 468.4 Mbps 0 bps 1 272 712 0 ether2 0 bps 243.2 Mbps 0 506 606 ether3 0 bps 241.6 Mbps 0 503 344 ether5 0 bps 236.4 Mbps 0 492 466 ether6 0 bps 243.7 Mbps 0 507 675 ether7 0 bps 244.5 Mbps 0 509 396 К слову сказать, остальные участники, воткнутые в железку, чувствуют себя вполне неплохо. Т.е. перегруз на первом порту не вызывает побочных явлений на остальных.

Решил проверить предположение о затыкании в 1гигабит. Минимальный размер ethernet-фрейма составляет 64 байт = 14 байт ethernet заголовок + 20 байт заголовок IP + 8 байт заголовок UDP + 22 байта данных. От этого и решил плясать. Запускаю флуд тест UDP-пакетами с размером данных в 22 байта. Получилась такая картина: Iface | Tx | Rx | Tx pps | Rx pps ether1 | 728.3 Mbps | 1568 bps | 1 422 433 | 2 ether2 | 0 bps | 204.0 Mbps | 0 | 398 518 ether3 | 1568 bps | 201.3 Mbps | 2 | 393 224 ether5 | 0 bps | 205.0 Mbps | 0 | 400 459 ether6 | 0 bps | 202.7 Mbps | 0 | 395 989 ether7 | 0 bps | 205.5 Mbps | 0 | 401 342 Если считать по pps, то из расчета, что каждый пакет длиною в 64 байта, получим: 64 * 8 = 512 бит * 1 422 433 pps = 728 285 696 бит. Следовательно железяка считает верно со всеми заголовками. Вроде пространство для маневра еще есть. Куда утыкаемся не очень понятно. По спецификации CCR1036-12G-4S должен уметь перекладывать 24 мппс - по 2 мппс на интерфейс. Наверное, у 8-портовой модификации примерно также должно быть. UPD1: Увеличил размер данных до 86 байт. Eth-фрейм, соответственно до 128 байт. Статистика стала выглядеть так: ether1 | 842.1 Mbps | 1040 bps | 822 373 | 1 ether2 | 0 bps | 403.4 Mbps | 0 | 393 978 ether3 | 0 bps | 405.3 Mbps | 0 | 395 823 ether5 | 0 bps | 400.0 Mbps | 0 | 390 583 ether6 | 0 bps | 400.3 Mbps | 0 | 390 908 ether7 | 0 bps | 404.2 Mbps | 0 | 394 767 128 * 8 * 822 373 = 842 109 952. Вот тут я верю, что мы уже близко к 1Гигабиту. UPD2: Еще в 2 раза увеличил пакет и Tx на интерфейсе жертвы теперь показывает 916.7 Mbps при 445 790 ппс.

Флудил пакетами UDP, данные - 4 байта. IP заголовок + UDP заголовок + данные = 32 байта. Минимальный Ethernet-фрейм - 64 байта = 512 бит. 1 гигабит = 1 000 000 000 разделим на 512, получим 1 953 125 пакетов в секунду. Я понимаю коллизии и все такое, но все равно наверное должно быть больше 1.5мппс потолок, я думаю. Завтра попробую увеличить размер полезных данных. Если ваша гипотеза верна, то увеличение размера данных в пакете до 22 байт никак не должно сказаться на числе pps.

Доброго дня! Имеется сабж. Тестируем на нагрузку. 1 интерфейс воткнут в жертву, с других 5-ти флудим ее маленькими udp-пакетами. Судя по статистике железки с каждого атакующего летит по 400kpps (суммарно около 2mpps). На интерфейс жертвы улетает всего 1.5mpps. Еще 500kpps где-то теряются. Выглядит это так: Interface | Tx | Rx | Tx pps | Rx pps ether1 | 709.5 Mbps | 0 bps | 1 478 157 | 0 ether2 | 0 bps | 189.4 Mbps | 0 | 394 635 ether3 | 0 bps | 192.8 Mbps | 0 | 401 671 ether5 | 0 bps | 191.5 Mbps | 0 | 398 901 ether6 | 0 bps | 192.7 Mbps | 0 | 401 473 ether7 | 0 bps | 192.7 Mbps | 0 | 401 361 Несколько моментов: 1) Сетевуха на жертве Intel Pro с распределенными по ядрам очередями. 2) Загрузка CPU на жертве минимальная. ksoftirqd не в топе. 3) На жертве есть правило в таблице mangle на прераутинге, которое дропает флудовый трафик дабы он не попадал в роутинг и не нагружал сервер. 4) Цифери по pps и трафику берутся с железки. 5) По трафику затыка нету, т.к. утилизация пропускной способности на интерфейсе жертвы около 700 Mbps. 6) В файрволе сабжа нету правил. 7) Никаких извращений не добавлял, но и ничего особенно не твикал. Этими пунктами я пытаюсь сказать, что пакеты не теряются между сабжем и жертвой, и что очевидные проблемы вроде исключили. Кто-нибудь знает, куда они теряются и что можно с этим сделать на текущей конфигурации. Имеется ввиду без применений бондинга и прочего раунд-робина. Т.е. реально ли вообще прокачать в интерфейс больше 1.5mpps? Буду благодарен за ответы. PS. Ниже представлен конфиг микротика. Бондинг уже позже добавили. # sep/24/2014 21:15:21 by RouterOS 6.1 # software id = R4TC-RN1S # /interface bonding add link-monitoring=none name=bonding1 slaves=ether1,ether4 /ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=2m mac-cookie-timeout=3d /ip pool add name=pool1 ranges=192.168.88.2-192.168.88.254 add name=pool2 ranges=192.168.89.2-192.168.89.254 add name=pool3 ranges=192.168.90.2-192.168.90.254 add name=pool4 ranges=192.168.91.2-192.168.91.254 add name=pool5 ranges=192.168.92.2-192.168.92.254 add name=pool6 ranges=192.168.93.2-192.168.93.254 add name=pool7 ranges=192.168.94.2-192.168.94.254 add name=pool8 ranges=192.168.95.2-192.168.95.254 /ip dhcp-server add address-pool=pool1 disabled=no interface=ether1 lease-time=1d name=server1 add address-pool=pool2 disabled=no interface=ether2 lease-time=1d name=server2 add address-pool=pool3 disabled=no interface=ether3 lease-time=1d name=server3 add address-pool=pool4 disabled=no interface=ether4 lease-time=1d name=server4 add address-pool=pool5 disabled=no interface=ether5 lease-time=1d name=server5 add address-pool=pool6 disabled=no interface=ether6 lease-time=1d name=server6 add address-pool=pool7 disabled=no interface=ether7 lease-time=1d name=server7 add address-pool=pool8 interface=ether8 lease-time=1d name=server8 add address-pool=pool1 disabled=no interface=bonding1 lease-time=1d name=server9 /port set 0 name=serial0 /ip address add address=192.168.88.1/24 comment="default configuration" interface=ether1 network=192.168.88.0 add address=192.168.1.24/24 interface=ether8 network=192.168.1.0 add address=192.168.89.1/24 interface=ether2 network=192.168.89.0 add address=192.168.90.1/24 interface=ether3 network=192.168.90.0 add address=192.168.91.1/24 interface=ether4 network=192.168.91.0 add address=192.168.92.1/24 interface=ether5 network=192.168.92.0 add address=192.168.93.1/24 interface=ether6 network=192.168.93.0 add address=192.168.94.1/24 interface=ether7 network=192.168.94.0 /ip dhcp-server lease add address=192.168.88.2 mac-address=00:1F:29:09:04:74 server=server1 add address=192.168.92.2 mac-address=00:1F:29:09:14:5C server=server5 add address=192.168.94.2 mac-address=00:1F:29:68:49:5E server=server7 add address=192.168.91.2 mac-address=00:1F:29:62:7B:36 server=server4 add address=192.168.90.2 mac-address=00:1F:29:68:C9:4C server=server3 add address=192.168.89.2 mac-address=00:1F:29:09:44:22 server=server2 add address=192.168.93.2 mac-address=00:1F:29:09:34:9C server=server6 /ip dhcp-server network add address=192.168.88.0/24 dns-server=8.8.8.8 gateway=192.168.88.1 netmask=24 add address=192.168.89.0/24 dns-server=8.8.8.8 gateway=192.168.89.1 netmask=24 add address=192.168.90.0/24 dns-server=8.8.8.8 gateway=192.168.90.1 netmask=24 add address=192.168.91.0/24 dns-server=8.8.8.8 gateway=192.168.91.1 netmask=24 add address=192.168.92.0/24 dns-server=8.8.8.8 gateway=192.168.92.1 netmask=24 add address=192.168.93.0/24 dns-server=8.8.8.8 gateway=192.168.93.1 netmask=24 add address=192.168.94.0/24 dns-server=8.8.8.8 gateway=192.168.94.1 netmask=24 add address=192.168.95.0/24 dns-server=8.8.8.8 gateway=192.168.95.1 netmask=24 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.88.1 name=router /ip firewall filter add chain=forward disabled=yes src-address=192.168.0.0/16 /ip firewall nat add action=masquerade chain=srcnat disabled=yes out-interface=ether8 src-address=192.168.0.0/16 /ip route add distance=1 gateway=192.168.1.1 add disabled=yes distance=1 dst-address=192.168.88.2/32 type=blackhole /lcd set time-interval=hour /system clock set time-zone-name=Asia/Novosibirsk /system leds set 0 type=interface-speed set 2 type=interface-speed /system ntp client set enabled=yes mode=unicast primary-ntp=212.73.125.217 /system routerboard settings set cpu-frequency=1200MHz memory-frequency=1066DDR /tool graphing interface add /tool graphing resource add

Если кому еще интересно. Недавно нарвались на такую же проблему и очень прискорбно было видеть вопрос без ответа. Сами решили эту проблему. Имеется ExtremeWare Summit1i с прошивкой 6.2.1b27 Как уже написал автор сабжа, бутром обновился без проблем. После этого попытались залить прошивку 7.0.0 на наботающую 6.2.1b27. Она в отличие от остальных 7.х.х не выдала ошибки Error: Source image bad, но когда ввели use image secondary и reboot, свич выдал что-то связанное с неправильной сигнатурой. Когда перезагрузили на холодную, вывалился в бутром. Оттуда загрузились в старую прошивку. После этого обновили образ сначала до 6.2.2 без особых проблем. Перезагрузились. Затем вкатали уже 7.0.0, снова перезагрузились. После этого решили, что нам фортит и не стали по всем промежуточным ходит, а вкатали сразу 7.7.1.1 и тоже в общем-то без каких бы то ни было проблем. Сейчас активно пользуем. Возможно, после 6.2.2 уже сразу можно было ставить 7.7.1.1. Этот вариант еще не пробовали. Надеюсь кому прикодится

Здравствуйте! Приобрели CISCO 7206VXR с 4 модулями FastEthernet. 3/0 смотрит наружу 4/0 смотрит вовнутрь Соответственно весь трафик бегает в этих портах. Все очень просто, но при попытке запинговать интерфейс 4/0 изнутри сети наблюдаются потери ~3-5%. Со стороны циски если пинг вовнутрь такая же история, причем, если параллельно зацепить линк на другой интерфейс циски (на 2/0) и пинговать адрес, который на нем висит, все нормально, никаких потерь. Загрузка девайса: CPU utilization for five seconds: 5%/2%; one minute: 4%; five minutes: 4% Трафик по интерфейсам: 3/0: Input queue: 0/75/0/74 (size/max/drops/flushes); Total output drops: 29233 Queueing strategy: weighted fair Output queue: 0/1000/64/29233 (size/max total/threshold/drops) Conversations 0/2/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 75000 kilobits/sec 5 minute input rate 3089000 bits/sec, 1096 packets/sec 5 minute output rate 4072000 bits/sec, 981 packets/sec 4/0: Input queue: 0/75/1/20880334 (size/max/drops/flushes); Total output drops: 17470 Queueing strategy: weighted fair Output queue: 0/1000/64/16986 (size/max total/threshold/drops) Conversations 0/2/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 75000 kilobits/sec 5 minute input rate 4085000 bits/sec, 978 packets/sec 5 minute output rate 3075000 bits/sec, 1085 packets/sec Т.е. и девайс сильно не нагружен, да и трафику не так уж много прокачивается, а ICMP куда-то улетают. Подскажите, пожалуйста, в какую сторону рыть?